7 of 7 Insider Threat Jobs in the UK excluding London

visibility role: you’ll work cross-functionally to understand distinct personas and problem spaces across Human Digital Risk—including Executive Protection, Insider Threat, and digital risk monitoring—and turn that understanding into clear, intuitive product experiences. You’ll lead both 0→1 concepts and the evolution … what to ship today Who You Are 7+ years of UX/product design experience; preference for candidates who have designed complex solutions in threat intelligence, cybersecurity, or related domains Expert in modern product design tools, especially Figma, with strong prototyping skills Experienced applying user-centered design: research, usability ...

memory-based evidence, and support the collection and preservation of digital evidence to establish root cause, impact and attacker activity. Working closely with threat intelligence, detection engineering and force stakeholders, you will provide technically sound advice to support incident remediation and organisational decision-making. Key Responsibilities Incident Response & Investigation … Lead and support investigations into cyber security incidents affecting UK policing, including ransomware, malware outbreaks, unauthorised access, data compromise and insider threat investigations. Perform detailed forensic analysis of endpoints, servers, cloud environments and associated digital evidence to evaluate the scope, root cause and impact of incidents. Support ...

granted access to sensitive environments. Errors in judgement or process can result in reputational damage, legal non-compliance, and increased risk of insider threats. This role is a specialist function requiring a high level of trust, responsibility, and alignment with government security standards. What ...

across AWS, GCP, and OCI, including: Cloud honeypots, decoy IAM roles, and honeytoken cloud credentials/API keys Control-plane, workload, container, and Kubernetes threat detection Cross-cloud identity and access misuse detection Ensure consistent detection, deception, and response coverage across hybrid and multi-cloud environments. Automation, Agentic … Cloud, and Engineering teams to embed deception and Defender XDR detection into all enterprise platforms. Provide mentorship and leadership to deception engineers, detection engineers, threat hunters, and SOC analysts. Communicate deception strategy, detection coverage, residual risk, and security improvements to senior stakeholders. What we offer: Enjoy a benefits package ...

independently and manage complex cyber investigations Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication Activity ...

events using IBM QRadar SIEM Investigate and respond to security incidents across various platforms Manage the full incident lifecycle, from identification to resolution Conduct threat detection and analysis, along with threat hunting activities Perform detailed log analysis across multiple security platforms Produce incident reports and post-incident reviews … threats If you are a SOC Analyst with a strong background in security operations and a keen eye for incident response and threat detection, our client wants to hear from you. This is a fantastic opportunity to contribute to a critical project within the Defence & Security sector. ...

hires and ongoing "aftercare" duties. Ensure all staff understand their personal responsibilities under the Official Secrets Act and the Security Policy Framework. Insider Risk: Monitor for and mitigate insider threats, conducting risk assessments and maintaining close liaison with HR and line management regarding staff reliability. Strategic ...